sysadminandClaude Opus 4.8 b179610e7f fix(webui): remediate PR #876 REQUEST_CHANGES for analytics (#651) ...

Address review blockers and medium/low findings:

- F1: HTML-escape all dynamic analytics fields (html.escape quote=True)
- F2: Gate POST /api/v1/analytics/usage through console_authz
  record_analytics_usage (fail closed for unauthenticated / Phase 1)
- F3: Enforce usage_events retention (max rows + max age)
- F4: Coerce None remote/org/repo to empty strings in load_analytics

Add tests for XSS escaping, unauthorized ingest deny, retention, and
None scope coercion. Document authz + retention in analytics guide.

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

2026-07-24 08:11:12 -04:00

..

architecture

docs(governance): correct linked-issue descriptions in restart ADR (#656)

2026-07-23 19:18:47 -04:00

examples

feat: add Controller Handoff + Thread State Ledger validation (#507)

2026-07-08 03:46:25 -04:00

observability

fix(webui): remediate PR #876 REQUEST_CHANGES for analytics (#651)

2026-07-24 08:11:12 -04:00

wiki

docs: ADR for stable MCP control runtime vs dev runtime (#615) (#616)

2026-07-16 14:58:43 -05:00

bootstrap-review-path.md

docs: define bootstrap review path for self-hosted MCP fixes (Closes #557)

2026-07-08 22:36:10 -04:00

canonical-repository-root.md

fix(mcp): consume canonical target root in cross-repository operations (Closes #741)

2026-07-18 12:02:31 -04:00

canonical-state-comments.md

feat: require canonical next-action state comments (#495)

2026-07-08 03:17:38 -04:00

canonical-thread-handoff.md

feat: add Canonical Thread Handoff protocol (Closes #505)

2026-07-08 03:44:58 -04:00

credential-isolation.md

docs: update safety and boundary docs for Jenkins/GlitchTip (#79) (#89)

2026-07-02 14:21:49 -05:00

developer-testing-guidelines.md

test: keep webui CI hermetic offline

2026-07-09 11:59:23 -04:00

gitea-dual-namespace-deployment.md

fix: align example config with reviewer merger separation

2026-07-08 02:19:37 -04:00

gitea-execution-profiles.md

fix(mcp): bind post-merge moot-lease cleanup to the reconciler capability (Closes #745)

2026-07-18 12:59:51 -04:00

issue-acceptance-gate.md

feat: add controller issue-acceptance gate (Closes #500)

2026-07-08 03:27:37 -04:00

label-taxonomy.md

fix(workflow): retire status:pr-open on every terminal PR transition (Closes #780)

2026-07-21 15:41:24 -04:00

llm-agent-sha.md

docs: LLM-Agent-SHA opaque attribution convention, Phase 0 (#86) (#87)

2026-07-02 14:00:46 -05:00

llm-workflow-runbooks.md

fix(workflow): retire status:pr-open on every terminal PR transition (Closes #780)

2026-07-21 15:41:24 -04:00

mcp-client-registration.md

docs: pin GlitchTip filing orchestrator contract (Closes #153)

2026-07-07 04:27:02 -04:00

mcp-daemon-import-guard.md

fix(guard): pin session-state authority and reject direct-import mutation (#695)

2026-07-13 21:48:28 -04:00

mcp-menu.md

feat: add workflow dashboard for queue, leases, and next safe action (Closes #605)

2026-07-19 14:43:10 -04:00

mcp-namespace-eof-recovery.md

fix(mcp): block manual daemon killing as workflow recovery (Closes #630)

2026-07-21 17:54:19 -05:00

mcp-namespace-health.md

fix: address PR #587 REQUEST_CHANGES for MCP namespace health (#543)

2026-07-09 18:44:04 -04:00

mcp-restart-coordinator.md

feat(mcp-health): add MCP restart coordinator and impact analysis (Closes #658)

2026-07-24 02:14:27 -04:00

mcp-restart-impact-sample.json

feat(mcp-health): add MCP restart coordinator and impact analysis (Closes #658)

2026-07-24 02:14:27 -04:00

mcp-restart-path-inventory.md

feat(mcp-health): inventory and guard MCP restart/reload/kill paths (#657)

2026-07-24 00:57:33 -04:00

mcp-tool-inventory.md

Merge branch 'master' into fix/issue-850-native-mcp-bootstrap

2026-07-24 06:16:32 -05:00

release-version-sop.md

docs: re-land release version SOP with v1.1.0 audit lessons (#111)

2026-07-03 03:24:26 -04:00

release-workflows.md

docs: fix trailing whitespace and add approved naming for #52

2026-07-01 04:17:30 -04:00

reviewer-handoff-consistency.md

feat: reject contradictory reviewer handoff ledgers (Closes #501)

2026-07-08 03:33:31 -04:00

safety-model.md

docs(governance): MCP restart governance and authorization policy (#656)

2026-07-23 19:16:28 -04:00

stable-runtime-promotion-runbook.md

feat: enforce stable-control vs dev runtime modes for Gitea MCP (Closes #615)

2026-07-20 10:48:47 -04:00

state-handoff-ledger.md

feat: add canonical state handoff ledger (#494)

2026-07-08 03:14:32 -04:00

tool-boundaries.md

docs: update safety and boundary docs for Jenkins/GlitchTip (#79) (#89)

2026-07-02 14:21:49 -05:00

two-comment-workflow.md

feat: require Controller Handoff plus Thread State Ledger (Closes #507)

2026-07-08 03:47:06 -04:00

webui-authz-audit.md

fix(webui): remediate PR #876 REQUEST_CHANGES for analytics (#651)

2026-07-24 08:11:12 -04:00

webui-deployment.md

docs(governance): MCP restart governance and authorization policy (#656)

2026-07-23 19:16:28 -04:00

webui-local-dev.md

Merge remote-tracking branch 'prgs/master' into feat/issue-639-webui-system-health-dashboard

2026-07-23 21:14:50 -04:00

webui-project-registry-api.md

feat(webui): versioned project registry API (Closes #635)

2026-07-22 16:12:07 -04:00

workflow-skill-mount.md

feat: mount canonical gitea-workflow skill for Codex and MCP inventory (Closes #551)

2026-07-08 22:43:46 -04:00